Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/5E4429F4E4E711E995912310F8AEA228.roa
File: 5E4429F4E4E711E995912310F8AEA228.roa (raw, json)
Hash identifier: CSKEv24WJq2rSIqhdKHY7ezulnm1GEl0XlEPfSauyvI=
Subject key identifier: C9:50:2B:13:BA:87:DB:56:E4:E1:96:47:6F:24:CD:37:1F:9E:B5:51
Certificate issuer: /CN=F3643835AF/serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
Certificate serial: 1B
Authority key identifier: 42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/5E4429F4E4E711E995912310F8AEA228.roa
Signing time: Wed 02 Oct 2019 07:36:38 +0000
ROA not before: Wed 02 Oct 2019 07:36:33 +0000
ROA not after: Wed 31 Oct 2029 07:36:33 +0000
asID: 37712
IP address blocks: 41.79.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3643835AF/serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
Validity
Not Before: Oct 2 07:36:33 2019 GMT
Not After : Oct 31 07:36:33 2029 GMT
Subject: CN=5d945386-afd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:62:1c:9a:f1:7c:f4:d9:37:b2:7b:d1:f2:
53:e5:b6:c2:dd:94:d8:a9:df:65:8f:ae:55:ab:c8:
5d:40:1a:ca:02:ee:10:1d:76:3c:60:df:a3:d0:e3:
e0:01:a9:25:01:b2:99:11:4b:0c:ca:3a:41:06:5c:
ea:8a:b7:21:42:e5:0c:2f:53:f8:f9:5e:ac:e5:05:
be:85:dc:22:aa:26:0e:7c:06:b3:a5:b6:7b:22:b9:
bc:f5:6c:8c:bc:d5:ef:0f:0f:d0:78:ed:36:ef:dd:
39:ad:c7:71:37:b3:d6:d0:51:05:a4:ba:1a:1f:a6:
e9:a2:c0:3e:d7:4c:c7:13:61:6e:8f:e3:e1:da:03:
6f:f5:cb:21:e1:03:7d:6d:02:16:35:e5:17:de:f4:
73:4b:f3:c7:c3:73:20:d5:bd:86:cf:58:c5:44:8e:
f2:1f:3f:5f:70:ff:23:ac:c0:0e:8f:3e:83:0e:a1:
fd:38:46:9b:5a:9c:09:bd:5f:58:88:0e:88:67:af:
e8:f4:03:9e:5d:cb:66:02:d2:e2:f3:30:88:9f:32:
42:c3:35:1d:ed:d2:dc:8c:8a:93:1b:84:34:74:a2:
25:1f:37:dc:79:ee:bc:59:c5:b0:22:ca:b3:57:a9:
92:44:df:58:c4:4e:1a:3c:f8:9a:dd:3a:2d:65:a3:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:50:2B:13:BA:87:DB:56:E4:E1:96:47:6F:24:CD:37:1F:9E:B5:51
X509v3 Authority Key Identifier:
keyid:42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/5E4429F4E4E711E995912310F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.79.88.0/24
Signature Algorithm: sha256WithRSAEncryption
38:24:93:e8:59:60:f3:c4:c6:40:1d:62:01:85:0a:a9:2a:8c:
52:95:d4:0e:58:fb:b5:97:19:ef:a9:b2:90:be:b7:d3:2b:95:
bb:da:f0:a0:a0:e4:b9:0e:cc:fd:55:8e:e0:f3:6e:ad:ab:ef:
7e:70:3e:bc:7d:ce:dc:ee:47:23:c2:1b:f4:68:21:99:a3:f0:
ca:e0:ce:00:88:3a:ae:65:82:04:e2:3d:aa:3b:1d:27:4c:95:
ae:bf:9a:59:61:42:18:1b:ba:49:ec:1b:30:51:3b:76:e2:88:
03:5c:ac:56:83:c3:a5:90:26:a7:cc:ff:88:f5:c4:85:76:b7:
b1:06:32:5d:f6:87:ee:c8:c1:13:be:5a:91:6f:fa:7e:11:a1:
7e:be:b9:33:ba:8f:b6:1e:58:2c:8b:d9:27:50:2b:41:64:07:
c1:6e:96:2b:6e:9f:b9:e2:b8:47:eb:fa:fe:1f:ce:76:97:ae:
0d:45:08:3f:d4:fb:fe:74:ee:f2:a0:c0:92:c8:7c:d3:8e:d7:
9a:65:49:a2:a8:86:a5:21:4e:e4:c0:77:fc:ff:85:53:44:a8:
57:d9:52:ab:b9:4a:36:57:6d:30:eb:53:67:92:d3:20:b7:3c:
3d:63:fa:3c:95:77:f5:9b:2d:ab:e7:db:ab:3c:45:1b:98:75:
c9:64:60:25
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBGzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MzgzNUFGMTEwLwYDVQQFEyg0MjhBODkzMThFNTA2N0REOUM4RUNGNjdFNzdFNzlD
NUZEQTM3OTJCMB4XDTE5MTAwMjA3MzYzM1oXDTI5MTAzMTA3MzYzM1owGDEWMBQG
A1UEAxMNNWQ5NDUzODYtYWZkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMjfYhya8Xz02Teye9HyU+W2wt2U2KnfZY+uVavIXUAaygLuEB12PGDfo9Dj
4AGpJQGymRFLDMo6QQZc6oq3IULlDC9T+PlerOUFvoXcIqomDnwGs6W2eyK5vPVs
jLzV7w8P0HjtNu/dOa3HcTez1tBRBaS6Gh+m6aLAPtdMxxNhbo/j4doDb/XLIeED
fW0CFjXlF970c0vzx8NzINW9hs9YxUSO8h8/X3D/I6zADo8+gw6h/ThGm1qcCb1f
WIgOiGev6PQDnl3LZgLS4vMwiJ8yQsM1He3S3IyKkxuENHSiJR833HnuvFnFsCLK
s1epkkTfWMROGjz4mt06LWWjhicCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBTJUCsT
uofbVuThlkdvJM03H561UTAfBgNVHSMEGDAWgBRCiokxjlBn3ZyOz2fnfnnF/aN5
KzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDM4MzUvRDVCOTk0QThENTVFMTFFOUI3NTcxMDQzRjhBRUEyMjgvUW9xSk1Z
NVFaOTJjanM5bjUzNTV4ZjJqZVNzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUW9xSk1ZNVFaOTJjanM5bjUzNTV4ZjJqZVNzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDM4MzUvRDVCOTk0QThENTVFMTFFOUI3NTcxMDQzRjhB
RUEyMjgvNUU0NDI5RjRFNEU3MTFFOTk1OTEyMzEwRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKU9YMA0GCSqGSIb3DQEBCwUAA4IBAQA4
JJPoWWDzxMZAHWIBhQqpKoxSldQOWPu1lxnvqbKQvrfTK5W72vCgoOS5Dsz9VY7g
826tq+9+cD68fc7c7kcjwhv0aCGZo/DK4M4AiDquZYIE4j2qOx0nTJWuv5pZYUIY
G7pJ7BswUTt24ogDXKxWg8OlkCanzP+I9cSFdrexBjJd9ofuyMETvlqRb/p+EaF+
vrkzuo+2Hlgsi9knUCtBZAfBbpYrbp+54rhH6/r+H852l64NRQg/1Pv+dO7yoMCS
yHzTjteaZUmiqIalIU7kwHf8/4VTRKhX2VKruUo2V20w61NnktMgtzw9Y/o8lXf1
my2r59urPEUbmHXJZGAl
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:30 2024 by rpki-client on console-ams.rpki-client.org